Application Security Engineer – Hybrid, SDLC Defender

Placements24; Lorenziberg; Hybrid; EUR 48,000 - 70,000; Full time

Job summary

Placements24 seeks an Information Security Specialist focused on Application Security to embed security into the SDLC. You will assess applications, identify vulnerabilities, and drive secure coding practices with development teams.

The role requires 4+ years in software or app security, experience with Burp Suite/OWASP ZAP/Veracode, and knowledge of OWASP Top 10. Hybrid work model in Queenstown, SA.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or related field.
• 4+ years of experience in software development or application security.
• Strong understanding of web vulnerabilities (SQLi, XSS, CSRF) and mitigations.
• Experience with Burp Suite, OWASP ZAP or Veracode.
• CI/CD and DevSecOps familiarity; cloud security concepts a plus.
• Certifications like CSSLP, GWAPT or GWEB are advantageous; eligible to work in SA.

Responsibilities

• Conduct security reviews of application designs and code.
• Perform vulnerability assessments and penetration testing on web and mobile apps.
• Identify and document application security risks and provide remediation guidance.
• Collaborate with development teams to integrate security into the SDLC (DevSecOps).
• Develop and implement secure coding guidelines and best practices.
• Educate developers on application security principles and common vulnerabilities.
• Assist in selecting and implementing app security tools (SAST, DAST, IAST).
• Respond to and investigate application security incidents.
• Stay current with emerging application security threats and technologies.
• Contribute to security testing frameworks and automation.

Skills

Application security

DevSecOps

Secure coding

Vulnerability assessment

Penetration testing

OWASP Top 10

CI/CD

Cloud security

Communication

Education

Bachelor's degree in CS/SE/related field

Tools

Burp Suite

OWASP ZAP

Veracode

Job description

Placements24 seeks an Information Security Specialist focused on Application Security to embed security into the SDLC. You will assess applications, identify vulnerabilities, and drive secure coding practices with development teams.

The role requires 4+ years in software or app security, experience with Burp Suite/OWASP ZAP/Veracode, and knowledge of OWASP Top 10. Hybrid work model in Queenstown, SA.